3302 matches found
CVE-2024-31584
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
SUSE CVE-2024-31580
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-31584
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
CVE-2024-31584
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
CVE-2024-31584
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
PT-2024-24144 · Pytorch +1 · Pytorch +1
Name of the Vulnerable Software and Affected Versions: Pytorch versions prior to 2.2.0 Description: The issue is related to an Out-of-bounds Read via the component torch/csrc/jit/mobile/flatbuffer loader.cpp. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolv...
CVE-2024-31584
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
CVE-2024-31584
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
CVE-2024-31584
Pytorch versions before v2.2.0 are vulnerable to an Out-of-bounds Read flaw within the torch/csrc/jit/mobile/flatbuffer_loader.cpp component. The root cause is a missing validation for the mobile_ivalue_size_ variable against the ivalues->size() in the FlatbufferLoader::parseModule function, w...
PyTorch security vulnerabilities
PyTorch is a Python package open-sourced by PyTorch. A security vulnerability exists in Pytorch versions prior to v2.2.0, which stems from an out-of-bounds read vulnerability in the component torch/csrc/jit/mobile/flatbufferloader.cpp...
CVE-2024-31584: Out-of-bounds Read
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
PyTorch heap buffer overflow vulnerability
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
Pytorch use-after-free vulnerability
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
aum (>=1.0.0, <=1.0.1), blitz-bayesian-pytorch (0.2.0) +42 more potentially affected by CVE-2024-31583 via torch (1.3.1)
torch PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aum =1.0.0, =0.3.0, =0.6.1, =0.1.0rc3, =0.0.1, =0.3.2, =0.0.1, =0.1.2, =0.0.6, =0.0.8 and more Source cves: CVE-2024-31583 Source advisory:...
GHSA-5PCM-HX3Q-HM94 PyTorch heap buffer overflow vulnerability
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
lightwood (>=0.6.6, <=0.6.7), pytorch-tabnet (>=0.1.0, <=0.1.2) +1 more potentially affected by CVE-2024-31583 via torch (1.0.1)
torch PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - lightwood =0.6.6, =0.1.0, =0.1.2 - syft 0.1.13a1 Source cves: CVE-2024-31583 Source advisory: OSV:GHSA-PG7H-5QX3-WJR3...
GHSA-PG7H-5QX3-WJR3 Pytorch use-after-free vulnerability
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
lightwood (>=0.6.6, <=0.6.7), pytorch-tabnet (>=0.1.0, <=0.1.2) +1 more potentially affected by CVE-2024-31580 via torch (1.0.1)
torch PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - lightwood =0.6.6, =0.1.0, =0.1.2 - syft 0.1.13a1 Source cves: CVE-2024-31580 Source advisory: OSV:GHSA-5PCM-HX3Q-HM94...
PYSEC-2024-328
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-31580
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...